CVE-2026-73597

Dell Policy Manager For Secure Connect Gateway: cross-site request forgery can lead to information disclosure

Risk score: 54/100
CVSS: 8.1 v3.1
Exploit chance (30 days): 0.1%
Published: 29 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, …
Affected: Dell Policy Manager For Secure Connect Gateway before 5.34.00.16
Fix: Upgrade Dell Policy Manager For Secure Connect Gateway to 5.34.00.16 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 8.1 high
Remotely exploitable without logging in

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Original description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass.

Last activity 29 Sep 2026. Patch Forecast updates every hour.